The dsHuristics attribute has stronger restrictions in Samba that in windows. The docs for this are in MS-ADTS 3.1.1.5.3.2 "Constraints" (modify operation) We should permit the longer strings as long as the follow the format (up to 90 chars)
This will shortly be fixed in "master".